Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/W4Pcf22JkiiKgzeXQPllK4-OZd0.roa
File: W4Pcf22JkiiKgzeXQPllK4-OZd0.roa (raw, json)
Hash identifier: 91PXsvws3wJyrJyunvjUtSY9l7VRLMZzbehhAnCLcuc=
Subject key identifier: 5B:83:DC:7F:6D:89:92:28:8A:83:37:97:40:F9:65:2B:8F:8E:65:DD
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0198565B1FEEA476D95CB8A6394CB944F261
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/W4Pcf22JkiiKgzeXQPllK4-OZd0.roa
Signing time: Tue 29 Jul 2025 13:24:29 +0000
ROA not before: Tue 29 Jul 2025 13:24:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206822
IP address blocks: 87.229.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:5b:1f:ee:a4:76:d9:5c:b8:a6:39:4c:b9:44:f2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 29 13:24:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b83dc7f6d8992288a83379740f9652b8f8e65dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c9:65:1e:7a:bb:6c:6f:d3:56:9e:51:43:49:
1d:4f:fa:45:c1:98:80:d3:6d:bb:21:49:2b:3f:93:
f2:26:88:dd:83:93:d3:cb:62:1b:58:40:3e:be:8a:
3a:98:ef:41:0b:02:35:20:dd:49:4a:a5:89:9c:91:
2f:b7:d4:4e:81:9e:4e:b7:41:cb:66:27:87:9f:39:
be:8d:dc:ce:2e:e5:98:ed:6d:88:be:39:f6:5e:7b:
bc:be:a4:62:e3:51:5d:c3:7c:d9:e0:2d:82:71:ea:
a3:1b:df:a4:ef:a6:ee:8d:a6:fa:93:55:b8:8d:bb:
e5:52:81:0f:1f:bc:5d:b6:45:b7:b1:1f:68:47:55:
da:73:4b:d5:e3:fa:b3:00:79:8c:2f:0b:7c:50:da:
9f:67:07:69:72:51:b6:0d:83:d3:18:df:74:c6:98:
fe:01:40:9c:5e:7d:a9:47:58:1d:6a:4e:f0:57:a6:
9a:c4:09:8c:07:57:be:ff:8d:36:1c:11:34:80:14:
8f:f3:d6:23:75:24:7d:c3:b1:38:c4:cf:4e:16:f8:
0c:2a:5e:c9:30:41:14:10:00:9e:b8:fe:ee:81:9d:
96:61:56:f5:35:eb:28:b8:77:f0:ed:02:d0:42:46:
d2:59:57:00:00:a6:a0:b8:20:bc:a5:f8:bc:49:2a:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:83:DC:7F:6D:89:92:28:8A:83:37:97:40:F9:65:2B:8F:8E:65:DD
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/W4Pcf22JkiiKgzeXQPllK4-OZd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.97.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8a:b8:95:c0:bc:7e:74:77:b6:26:4a:e2:bc:1e:39:97:46:
83:30:60:2e:61:b4:5f:92:c8:b5:28:5c:92:03:76:8d:ab:29:
4c:c6:00:57:93:bd:51:1b:27:e6:a2:c0:6c:be:2c:ea:fe:02:
88:3d:82:1f:06:72:5c:d9:9b:f3:d8:6f:78:ea:35:05:a5:fe:
2f:18:40:c6:3a:1c:c9:f7:2e:bd:d9:e3:a3:2f:a2:15:20:02:
82:e3:02:5c:c5:3c:0c:f0:d4:e4:d8:99:2a:e1:2d:89:5a:79:
60:d4:20:55:fb:90:72:05:1d:c4:07:d3:c2:5e:7c:fc:5a:ae:
6d:da:c4:d8:e4:4f:d9:b6:d5:37:d1:14:24:db:a5:d4:e5:38:
c9:28:f9:4c:0a:76:f4:6e:c8:21:96:43:73:ec:63:9b:33:fc:
d1:ef:44:e9:a8:c3:09:c1:dd:fc:25:41:aa:a9:00:55:7d:36:
d3:1c:21:e2:ee:0e:44:32:5f:0c:0c:21:d0:76:8f:17:4f:e9:
73:78:3d:7d:00:b0:64:19:c9:cb:8a:7b:1a:b9:88:2d:53:0d:
69:34:e7:20:fd:0e:2d:d1:50:31:c3:f6:12:33:92:4c:08:59:
84:ad:2e:15:b1:f3:9f:3a:34:75:cb:50:0c:64:9a:5a:2a:28:
d4:be:71:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:49:09 2025 by rpki-client